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Abstract 

Battlefield  surveillance  often  involves  a  high  element  of  risk 
for  military  operators.  Hence,  it  is  very  important  for  the  mili¬ 
tary  to  execute  unmanned  surveillance  by  using  large-scale  wire¬ 
less  sensor  systems.  This  invited  paper  summarizes  the  archi¬ 
tecture  of  the  VigilNet  system  -  a  long-term  real-time  networked 
sensor  system  for  military  surveillance.  Specifically,  we  review 
the  design  of  several  major  subsystems  within  VigilNet  includ¬ 
ing  sensing  and  classification,  localization,  tracking,  networking, 
power  management,  reconfiguration,  graphic  user  interface,  and 
the  debugging  subsystem.  High-level  programming  abstractions 
are  also  presented.  This  is  a  balanced  design  to  achieve  real¬ 
time  response,  high  confidence  detection,  accurate  tracking  and 
energy  efficiency  simultaneously. 


1.  INTRODUCTION 

Recently,  many  efforts  have  been  undertaken  to  support  new 
military  applications  by  using  large-scale  wireless  sensor  networks, 
Unmanned  real-time  surveillance  is  one  of  the  most  promising  ap¬ 
plications.  By  combining  the  computation,  sensing,  actuation  and 
wireless  networking  together,  large-scale  sensor  networks  have 
several  advantages  over  many  other  distributed  systems.  First, 
sensor  networks  can  be  quickly  deployed  in  an  infrastructure-free 
environment,  which  is  highly  desired  in  military  operations.  Sec¬ 
ond,  the  redundancy  introduced  by  a  large-scale  dense  deploy¬ 
ment  makes  a  sensor  system  robust  to  node  failures,  which  is 
critical  in  a  hostile  environment.  Third,  massively  distributed  in- 
network  data  processing  allows  exploration  of  new  techniques  for 
detection  and  classification,  not  posible  with  only  a  small  number 
of  devices.  Along  with  these  advantages,  however,  several  chal¬ 
lenges  arise.  The  constrained  resources  in  wireless  sensor  nodes, 
such  as  limited  memory,  power,  processing,  and  communication 
bandwidth,  impose  problems  previous  research  did  not  need  to 
address.  To  realize  the  vision  of  wireless  surveillance  systems, 
many  research  efforts  have  been  published  that  address  challeng¬ 
ing  problems  concerning  networking  [14],  self-organization  [4], 
energy-conservation  [27,  30]  and  tracking  [16]  in  this  type  of  sys¬ 
tems.  However,  most  existing  efforts  address  individual  protocols 


or  subproblems  in  the  design  space.  Few  systems  actually  pro¬ 
vide  a  complete  architecture  and  a  running  implementation  tested 
in  outdoor  environments.  The  VigilNet  project  is,  therefore,  dis¬ 
tinguished  in  this  aspect.  It  is  a  large-scale  sensor  network  sys¬ 
tem  which  has  been  successfully  designed,  built,  demonstrated 
and  delivered  to  the  military  for  realistic  deployment.  To  accom¬ 
plish  different  mission  objectives,  the  VigilNet  system  consists 
of  40,000  lines  of  code,  supporting  multiple  existing  mote  plat¬ 
forms  including  MICA2DOT,  MICA2,  and  XSM.  To  accommo¬ 
date  various  mission  requirements,  VigilNet  is  dynamically  re- 
configurable  and  reprogrammable.  For  example,  we  can  flexibly 
explore  trade-offs  between  surveillance  quality  parameters  and 
network  lifetime  by  adjusting  various  system  parameters  online. 

The  remainder  of  this  paper  is  organized  as  follows:  Section  2 
discusses  the  related  work.  Section  3  presents  the  overarching 
architecture  of  VigilNet  and  the  details  of  individual  subsystems. 
We  list  several  lessons  learned  from  our  experience  in  Section  4 
and  conclude  the  paper  in  Section  5. 

2.  RELATED  WORK 

Middleware  services  form  the  basis  of  sensor  network  sys¬ 
tems.  Localization  is  a  key  service  to  identify  the  locations  from 
where  sensor  readings  are  obtained.  Two  categories  of  local¬ 
ization  have  been  proposed:  range-based  schemes  [22,  24]  and 
range-free  schemes  [2,  11].  The  former  category  uses  absolute 
point-to-point  distance  estimates  (range)  or  angle  estimates  to  lo¬ 
calize  nodes;  The  latter  makes  no  assumptions  about  the  availabil¬ 
ity  of  such  information.  Time  synchronization  is  another  critical 
middleware  service.  The  reference  broadcast  scheme  (RBS)  pro¬ 
posed  in  [7]  maintains  information  about  the  phase  and  frequency 
of  each  pair  of  clocks  in  the  neighborhood  of  a  node.  While 
RBS  achieves  a  precision  of  about  1  ps,  the  message  overhead 
in  maintaining  the  neighborhood  information  is  high  and  may  not 
be  energy-efficient  in  large-scale  systems.  Maroti  [21]  synchro¬ 
nizes  the  network  through  limited  flooding  with  timestamp  values 
reassigned  at  intermediate  nodes  immediately  prior  to  transmis¬ 
sion.  This  scheme  reduces  the  synchronization  error  introduced 
by  uncertainty  due  to  MAC  contention.  Our  VigilNet  system  uses 
a  variation  of  this  approach.  In  addition,  power  management  is 
employed  to  ensure  network  longevity.  Other  important  proto- 
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cols  developed  for  modern  sensor  network  hardware  [5,  6]  in¬ 
clude  medium  access  control  [23,  31],  sensing  coverage  [27,  30], 
energy  aware  routing  [29],  data  aggregation  [20,  10],  topology 
management  [4]  and  energy-aware  applications  [12,  26,  28]. 

With  the  assistance  of  various  middleware  services,  several 
outdoor  sensor  network  systems  have  recently  been  built.  The 
Great  Duck  Island  Project  [26]  explores  long-term  habitat  moni¬ 
toring  in  remote  environments.  ZebraNet  [15]  focuses  on  wildlife 
tracking  in  Africa.  The  Extreme  Scaling  project  [6]  investigates 
scalability  issues  in  surveillance  systems.  The  shooter  localiza¬ 
tion  system  [8]  combines  precise  time  synchronization  with  accu¬ 
rate  acoustic  sensing  to  localize  positions  of  snipers.  The  Wisden 
system  [28]  monitors  the  health  of  building  structures  by  con¬ 
tinuously  retrieving  structural  response  data.  To  complement  the 
aforementioned  efforts,  VigilNet  aims  at  building  a  practical  mil¬ 
itary  surveillance  system,  which  can  survive  in  harsh  and  hostile 
environments  for  a  long  period  of  time,  and  exhibit  a  high  de¬ 
tection,  classification  and  tracking  performance.  These  require¬ 
ments  necessitate  the  design  of  unique  solutions  to  various  sens¬ 
ing,  communication,  and  tracking  problems  [9,  17,  18,  19,  25,  32] 
and  call  for  seamless  integration  of  the  resulting  middleware  com¬ 
ponents  [12]. 

3.  VIGILNET  ARCHITECTURE 

The  VigilNet  system  has  a  layered  architecture  as  shown  in 
Figure  1.  This  architecture  provides  an  end-to-end  solution  for 
supporting  military  surveillance  applications.  As  an  overview, 
this  paper  focuses  on  the  design  of  individual  components  of  this 
system,  but  omits  the  details  of  system  implementation  and  per¬ 
formance  evaluation.  Such  details  can  be  found  in  other  publica¬ 
tions  by  the  authors  [9,  12,  17,  18,  19,  25,  32] 

3.1  Sensing  Subsystem 

Sensing  is  the  basis  for  any  surveillance  system.  The  VigilNet 
sensing  subsystem  implements  detection  and  classification  of  tar¬ 
gets  using  continuous  online  sensor  calibration  (to  a  changing  en¬ 
vironment)  and  frequency  filters  to  determine  critical  target  fea¬ 
tures.  These  filters  extract  the  target  signatures  from  a  specific 
spectrum  band,  eliminating  the  burden  of  applying  a  computation¬ 
intensive  Fast  Fourier  Transform.  The  sensing  subsystem  con¬ 
tains  three  detection  algorithms  for  the  magnetic  sensor,  acoustic 
sensor  and  passive  infrared  sensor  (PIR),  respectively. 

•  The  magnetic  sensor  detection  algorithm  computes  two  mov¬ 
ing  averages  of  most  recent  magnetic  readings.  The  slower 
moving  average,  with  more  weight  on  previous  readings, 
establishes  a  baseline  to  follow  the  thermal  drift  noise  caused 
by  the  changing  temperature  during  the  day.  The  faster 
moving  average,  with  more  weights  on  the  current  read¬ 
ing,  detects  the  swift  change  in  magnetic  filed  caused  by 
ferrous  targets.  To  make  a  detection  decision,  the  differ¬ 
ence  between  the  two  moving  average  values  is  compared 


to  a  dynamic  threshold,  which  is  established  during  the  cal¬ 
ibration  phase. 

•  The  acoustic  sensor  detection  algorithm  uses  a  lightweight 
power-based  approach.  It  first  computes  a  moving  aver¬ 
age  of  multiple  recent  acoustic  readings,  then  establishes  an 
auto-adapting  acoustic  threshold  by  calculating  a  moving 
standard  deviation  of  readings  over  a  certain  time  window. 
If  an  acoustic  reading  is  larger  than  the  sum  of  the  moving 
average  and  its  corresponding  moving  standard  deviation, 
we  consider  it  is  a  crossover.  If  the  number  of  crossovers 
exceeds  a  certain  threshold  during  a  unit  of  time,  this  algo¬ 
rithm  signals  a  detection  to  the  upper  layer  components. 

•  The  passive  infrared  sensor  is  designed  to  sense  changes 
in  thermal  radiation  that  are  indicative  of  motion.  When 
there  is  no  movement,  the  thermal  reading  is  stable  and 
does  not  trigger  detections.  If  an  object  is  moving  in  front 
of  a  PIR  sensor,  this  object  causes  a  thermal  disturbance, 
triggering  the  PIR.  Most  moving  objects,  such  as  shaking 
leaves,  rain  drops,  and  vehicles,  can  trigger  the  PIR  sen¬ 
sor.  However,  different  thermal  signatures  generate  trig¬ 
ger  events  with  different  frequencies.  Fow  frequency  de¬ 
tections  (<  2 Hz)  are  normally  triggered  by  wind-induced 
motion  and  other  slow  moving  objects.  On  the  other  hand, 
fast-moving  targets  such  as  vehicles  generate  signals  with  a 
much  higher  frequency.  Therefore,  it  is  sufficient  to  design 
a  high  pass  ARM  A  filter  to  filter  out  the  frequency  com¬ 
ponents  lower  than  2Hz.  Similar  to  other  detection  algo¬ 
rithms,  this  threshold  is  dynamically  adaptated  to  accom¬ 
modate  the  changing  environment.  For  example,  thermal 
noise  is  much  higher  in  a  hot  and  humid  environment  than 
that  in  a  dry  and  cool  one.  In  fact,  thermal  and  humidity 
variations  over  the  course  of  a  day  can  significantly  change 
threshold  values. 

Due  to  the  space  constraints,  we  do  not  detail  the  specific  im¬ 
plementation  of  each  sensing  algorithm.  More  information  on  this 
subsystem  can  be  found  in  [9] . 

3.2  Context-Awareness  Subsystem 

Sensed  data  is  meaningful  only  when  it  is  interpreted  along 
with  the  context  in  which  it  is  obtained.  For  example,  a  temper¬ 
ature  reading  is  useless,  if  we  don’t  know  where  and  when  such 
value  is  measured.  The  Context- Awareness  subsystem  comprises 
lower-level  context  detection  components  such  as  time  synchro¬ 
nization  and  localization.  These  components  form  the  basis  for 
implementing  other  subsystems,  such  as  the  tracking  subsystem. 
Focalization  ensures  that  each  node  is  aware  of  its  location,  so 
that  we  can  determine  the  location  of  detected  targets.  Time  syn¬ 
chronization  is  responsible  for  synchronizing  the  local  clocks  of 
nodes  with  the  clock  of  the  base  station,  so  that  every  node  in  the 
network  has  a  consistent  global  view  of  time.  Combining  time 
synchronization  and  localization,  we  are  able  to  estimate  the  ve¬ 
locity  of  targets. 
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Figure  1:  The  VigilNet  System  Architecture 


In  the  VigilNet  system,  we  adopt  a  variation  of  the  time  syn- 
chronzation  protocol  developed  by  Maroti  [21]  and  we  design 
and  implement  a  walking  GPS  solution  [25],  which  assigns  nodes 
their  location  at  the  time  they  are  deployed.  We  are  currently  in¬ 
vestigating  realistic  implementations  of  more  dynamic  localiza¬ 
tion  schemes  such  as  those  described  in  [11]. 

3.3  Tracking  and  Classification  Subsystem 

When  a  target  is  detected  by  a  set  of  nearby  nodes,  the  track¬ 
ing  component  creates  a  group.  All  nodes  that  detect  the  same 
event  join  the  same  group.  The  main  contribution  of  the  track¬ 
ing  component  is  to  ensure  the  uniqueness  (one-to-one  mapping 
of  external  events  to  logical  groups)  and  consistent  identification 
(immutability  of  the  mapping  function)  of  targets,  as  long  as  tar¬ 
gets  are  far  enough  apart  from  each  other  or  have  different  signa¬ 
tures.  When  targets  are  very  near  each  other  and  process  an  iden¬ 
tical  signature,  we  provide  a  disambiguation  mechanism  based  on 
their  path-histories.  More  information  on  this  subsystem  can  be 
found  in  [1]  and  [18]. 

3.4  Networking  Subsystem 

After  VigilNet  collects  detection  information  about  incoming 
targets  through  the  tracking  and  classification  subsystem,  it  needs 
to  deliver  detection  reports  back  to  the  control  center  through  a 
multi-hop  network.  The  networking  subsystem  consists  of  three 
major  components:  a  link  symmetry  detection  service,  a  robust 
diffusion  service  and  a  radio-based  wakeup  service.  Low  power 
radio  components,  such  as  Chipcon  CC1000  used  by  MICA2  [5], 


exhibit  very  irregular  communication  patterns.  To  address  this 
problem,  we  design  a  Link  Symmetry  Detection  (LSD)  module  to 
reduce  the  impact  of  radio  irregularity  on  upper  layer  protocols. 
The  main  idea  of  the  LSD  module  is  to  build  a  symmetric  overlay 
on  top  of  the  anisotropic  radio  layer,  so  that  those  protocols  whose 
correctness  depends  on  the  link  symmetry  can  be  used  without 
modification.  More  details  on  this  solution  can  be  found  in  [32]. 
The  robust  diffusion  service  utilizes  a  well-known  path-reversal 
technique  [14].  Basically,  a  base  node  disseminates  tree  construc¬ 
tion  requests  to  the  rest  of  the  network  with  a  running  hop-count 
initialized  to  zero.  Requests  are  flooded  outwards  with  hop-count 
incremented  at  every  intermediate  hop.  After  receiving  tree  con¬ 
struction  requests,  nodes  establish  multiple  reverse  paths  towards 
the  sending  node.  As  a  result,  a  multi-parent  diffusion  tree  is  con¬ 
structed  with  the  base  node  residing  at  the  root.  The  Radio-based 
Wakeup  service  is  designed  to  ensure  end-to-end  data  delivery 
even  intermediate  nodes  are  in  the  dormant  state  (due  to  power 
management).  To  support  the  illusion  of  on-demand  wakeup,  a 
dormant  node  wakes  up  and  checks  radio  activity  periodically 
(e.g.,  for  five  milliseconds  every  several  hundred  milliseconds). 
If  no  radio  activity  is  detected,  this  node  goes  back  to  sleep.  Oth¬ 
erwise,  it  remains  active  to  receive  and  relay  messages.  If  an 
active  node  wants  to  wake  up  all  neighboring  nodes,  it  only  needs 
to  send  out  a  message  with  a  long  enough  preamble  to  last  longer 
than  the  checking  period  of  the  dormant  nodes. 

3.5  Graphic  User  Interface  and  Control  Subsystem 

The  networking  subsystem  delivers  the  reports  to  one  or  more 
command  and  control  centers,  where  the  Graphic  User  Interface 
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and  Control  subsystem  is  located.  This  subsystem  provides  three 
major  functionalities.  First,  it  accepts  the  reports  from  the  sen¬ 
sor  field  and  displays  such  information  graphically  to  the  mission 
operators.  Second,  it  allows  the  mission  operators  to  disseminate 
the  system  configurations  through  the  reconfiguration  subsystem. 
Third,  based  on  the  initial  detections  from  the  sensor  field,  it 
makes  final  decisions  on  whether  to  wake  up  more  advanced  sen¬ 
sors.  These  advanced  sensors  not  only  classify  the  type  of  targets 
but  also  differentiate  the  model  of  the  targets.  Since  they  are  ex¬ 
tremely  power  consuming,  they  are  normally  turned  off  and  only 
used  when  awakened  by  initial  detections  coming  from  the  sensor 
field. 

3.6  The  Power  Management  Subsystem 

One  of  the  key  design  objectives  of  the  VigilNet  system  is  to 
increase  the  system  lifetime  to  3  ~  6  months  in  realistic  deploy¬ 
ment.  Due  to  the  small  form  factor  and  low-cost  requirements, 
sensor  devices  such  as  XSM  motes  [6]  are  equipped  with  lim¬ 
ited  power  sources  (e.g.,  two  A  A  batteries).  The  normal  lifetime 
for  such  a  sensor  node  is  about  4  days  if  it  remains  active  all 
the  time.  To  bridge  such  a  gap,  we  add  a  power  management 
subsystem.  Among  all  the  middleware  services,  the  tripwire  ser¬ 
vice,  sentry  selection,  duty  cycle  scheduling  and  wakeup  service 
form  the  basis  for  the  power  management  subsystem.  We  orga¬ 
nize  them  into  a  multi-dimensional  architecture.  At  the  top  level, 
we  use  the  tripwire  service  to  divide  the  sensor  field  into  multi¬ 
ple  sections,  called  tripwire  sections.  A  tripwire  section  can  be 
scheduled  either  into  an  active  or  a  dormant  state  at  a  given  point 
of  time.  When  a  tripwire  section  is  dormant,  all  nodes  within 
this  section  are  in  a  deep-sleep  state  to  conserve  energy.  When 
a  tripwire  section  is  active,  we  apply  a  second-level  sentry  ser¬ 
vice  within  this  section.  The  basic  idea  of  the  sentry  service  is  to 
select  only  a  subset  of  nodes,  which  we  define  as  sentries ,  to  be 
in  charge  of  surveillance.  Other  nodes,  defined  as  non-sentries , 
can  be  put  into  a  deep- sleep  state  to  conserve  energy.  Rotation  is 
periodically  done  among  all  nodes,  selecting  the  nodes  with  more 
remaining  energy  as  sentries.  At  a  third-level,  since  a  target  can 
normally  be  sensed  for  a  non-negligible  period  of  time,  it  is  not 
necessary  to  turn  sentry  nodes  on  all  the  time.  We  can  schedule 
a  sentry  node  in  and  out  of  sleep  state  to  conserve  energy.  The 
sleep/awake  schedule  of  a  sentry  node  can  be  either  independent 
of  other  nodes  or  coordinated  with  that  of  others  in  order  to  further 
reduce  the  detection  delay  and  increase  the  detection  probability. 
More  information  on  nodes’  duty  cycle  scheduling  can  be  found 
at  [3]. 

3.7  The  Reconfiguration  Subsystem 

The  VigilNet  system  is  designed  to  accommodate  different 
node  densities,  network  topologies,  sensing  and  communication 
capabilities  and  different  mission  objectives.  Therefore,  it  is  im¬ 
portant  to  design  an  architecture  that  is  flexible  enough  to  accom¬ 
modate  various  system  scenarios.  The  reconfiguration  subsystem 
addresses  this  issue  through  two  major  components:  a  multi-hop 


reconfiguration  module  and  a  multi-hop  reprogramming  module. 
The  reconfiguration  module  allows  fast  parameter  tuning  through 
a  data  dissemination  service,  which  supports  limited  flooding. 
Data  fragmentation  and  defragmentation  are  supported  in  the  re¬ 
configuration  subsystem  to  allow  various  sizes  of  the  system  pa¬ 
rameters.  The  reprogramming  module  provides  a  high  level  of 
flexibility  by  reprogramming  the  nodes.  More  information  on  re¬ 
programming  can  be  found  at  [13]. 

3.8  The  Debugging  Subsystem 

Debugging  and  tuning  event-driven  sensor  network  applica¬ 
tions  such  as  VigilNet  are  of  great  difficulty  for  the  following  rea¬ 
sons:  (i)  big  discrepancies  exist  between  simulations  and  empiri¬ 
cal  results  due  to  various  practical  issues  (e.g.,  radio  and  sensing 
irregularity)  not  captured  in  simulators,  which  makes  them  less 
accurate;  (ii)  In-field  tests  of  the  system  require  walking  or  driv¬ 
ing  through  the  field  to  generate  events  of  interest  actively,  which 
makes  in-field  tests  extremely  costly.  To  address  this  issue,  we 
add  a  debugging  subsystem  called  EnviroLog  [19]  into  VigilNet. 
EnviroLog  logs  environmental  events  into  non-volatile  storage  on 
the  motes  (e.g.,  the  512  KB  external  flash  memory)  with  time- 
stamps.  These  events  can  then  be  replayed  in  their  original  time 
sequence  on  demand.  EnviroLog  reduces  experimental  overhead 
by  eliminating  the  need  to  physically  re-generate  events  of  in¬ 
terest  hundreds  of  times  for  debugging  or  parameter  tuning  pur¬ 
poses.  It  also  facilitates  comparisons  between  different  evaluated 
protocols. 

3.9  The  Programming  Interface 

The  programming  interface  is  an  extension  of  our  prior  work 
on  EnviroSuite  [  1 8] .  It  adopts  an  object-based  programming  model 
that  combines  logical  objects  and  physical  elements  in  the  exter¬ 
nal  environment  into  the  same  object  space.  EnviroSuite  differs 
from  traditional  object-oriented  languages  in  that  its  objects  may 
be  representatives  of  physical  environmental  elements.  Enviro¬ 
Suite  makes  such  objects  the  basic  computation,  communication 
and  actuation  unit,  as  opposed  to  individual  nodes.  Thus,  it  hides 
implementation  details  such  as  individual  node  activities  and  in¬ 
teractions  among  nodes  from  developers.  Using  language  prim¬ 
itives  provided  by  EnviroSuite,  developers  of  tracking  or  moni¬ 
toring  applications  simply  can  specify  object  creation  conditions 
(sensory  signatures  of  targets),  object  attributes  (monitored  ag¬ 
gregate  properties  of  targets),  and  object  methods  (desired  com¬ 
putation,  communication  or  actuation  in  the  vicinity  of  targets). 
Such  specifications  can  be  translated  by  an  EnviroSuite  compiler 
into  real  applications  that  are  directly  executable  on  motes.  When 
defined  object  conditions  are  met,  dynamic  object  instances  are 
automatically  created  by  the  run-time  system  of  EnviroSuite  to 
collect  object  attributes  and  execute  object  methods.  Such  in¬ 
stances  float  across  the  network  following  the  targets  they  repre¬ 
sent,  and  are  destroyed  when  the  targets  disappear  or  move  out  of 
the  network. 
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3.10  System  Work  Flow 


station.  More  information  on  false  alarm  reduction  can  be 
found  at  [9]. 


To  avoid  interference  among  different  operations,  VigilNet  em¬ 
ploys  a  multiple-phase  work  flow.  The  transition  between  phases 
is  time-driven,  as  shown  in  Figure  2.  Phases  I  through  VII  com¬ 
prise  the  initialization  process  which  normally  takes  about  several 
minutes.  In  Phase  I,  the  reconfiguration  subsystem  initializes  the 
whole  network  with  a  set  of  parameters.  In  Phase  II,  the  context- 
awareness  subsystem  synchronizes  all  nodes  in  the  field  with  the 
master  clock  at  the  base,  followed  by  the  localization  process  in 
Phase  III.  In  Phase  IV  and  V,  the  networking  subsystem  estab¬ 
lishes  a  robust  diffusion  tree  for  end-to-end  data  delivery.  Phase 
VI  invokes  the  power  management  subsystem  to  activate  tripwire 
sections  and  select  a  subset  of  the  nodes  as  sentries.  The  system 
layout,  sentry  distribution  and  network  topology  are  reported  to 
the  graphic  user  interface  and  control  subsystem  in  Phase  VII. 
After  that,  the  nodes  enter  into  the  main  phase  VIII-  the  surveil¬ 
lance  phase.  In  this  phase,  nodes  enable  the  power  management 
subsystem  in  absence  of  significant  events,  and  activate  the  track¬ 
ing  subsystem  once  a  target  enters  into  the  area  of  interest. 


Figure  2:  Phase  Transition  and  Rotation 


4.  LESSONS  LEARNED 

We  obtained  valuable  lessons  during  the  process  of  building 
the  VigilNet  system.  We  share  them  here  to  assist  similar  efforts 
in  other  application  domains. 

1.  False  Alarm  Reduction:  False  alarms  introduce  unnec¬ 
essary  energy  consumption  and  inappropriate  reactions.  To 
deal  with  transient  false  alarms  caused  by  distortion  of  sens¬ 
ing  readings,  one  can  use  a  simple  exponential  weighted 
moving  average  (EWMA).  To  address  false  alarms  caused 
by  slow-changing  environments,  one  needs  to  use  adap¬ 
tive  detection  thresholds.  To  address  persistent  false  alarms 
due  to  errors  in  a  single  sensor  device,  one  can  utilize  in- 
network  aggregation  of  inputs  from  a  group  of  nodes  to  de¬ 
tect  such  an  anomaly.  In  the  worst  case,  when  multiple  per¬ 
sistent  false  alarms  are  generated  simultaneously,  one  can 
filter  out  such  false  alarms  by  analyzing  spatial  and  tempo¬ 
ral  correlations  among  the  consecutive  reports  at  the  base 


2.  Communication  Reliability:  Communication  reliability 
is  affected  by  link  quality.  Poor  link  quality  can  be  ad¬ 
dressed  by  retransmissions,  however  with  a  very  high  over¬ 
head.  With  high  link  redundancy  in  a  dense  sensor  network, 
it  is  beneficial  to  carefully  select  high  quality  links  for  data 
delivery  than  to  use  FEC/ARQ  techniques  to  improve  trans¬ 
mission  reliability  over  poor  radio  links.  To  select  high 
quality  links,  one  can  use  the  link  symmetry  detection  ser¬ 
vice  we  developed  [32]  for  the  VigilNet  system.  Moreover, 
it  is  beneficial  to  provide  reliability  selectively  according 
to  the  semantics  of  the  payload.  Application-level  mecha¬ 
nisms  are  appropriate  to  achieve  such  differentiation. 

3.  Energy  Bottleneck:  Although  the  radio  power  draw  is 
very  high,  the  amortized  power  draw  from  communication 
is  actually  very  low  in  a  surveillance  system,  due  to  its  very 
low  duty  cycle.  In  contrast,  we  need  to  monitor  the  envi¬ 
ronment  continuously  to  ensure  detection.  Accordingly,  the 
amortized  power  draw  for  sensing  is  much  higher  than  that 
of  communication.  Therefore,  the  most  effective  way  to 
conserve  energy  is  to  reduce  sensing  redundancy  (turn  off  a 
subset  of  nodes)  in  the  absence  of  significant  events  and  to 
activate  nodes  on-demand.  In  addition,  a  promising  direc¬ 
tion  is  to  utilize  hardware-driven  wakeup  functions  to  sig¬ 
nificantly  reduce  energy  consumption  during  surveillance. 

4.  Other  Lessons:  Debugging  and  performance  tuning  in  dis¬ 
tributed  sensor  networks  are  extremely  time  consuming, 
especially  during  field  tests.  It  is  critical  to  have  appro¬ 
priate  built-in  system  support  for  these  functions,  such  as 
the  reconfiguration  subsystem  and  the  debugging  subsys¬ 
tem  [19].  Second,  in  addition  to  the  hardware  and  software, 
the  mechanical  design  is  very  important  to  ensure  good  sys¬ 
tem  performance.  For  example,  enclosure  design  can  sig¬ 
nificantly  affect  the  sensitivity  of  senor  nodes.  Third,  since 
the  sensor  nodes  fail  at  a  much  higher  rate  in  hostile  out¬ 
door  environments,  self-healing  should  be  supported  by  ev¬ 
ery  protocol  integrated  into  the  system. 

5.  CONCLUSIONS 

This  paper  presents  the  design,  implementation  and  evaluation 
of  VigilNet  -  an  integrated  sensor  system  for  long-term  surveil¬ 
lance.  We  describe  the  functionalities  of  different  subsystems 
within  VigilNet.  From  our  experience,  we  believe  that  surveil¬ 
lance  using  wireless  sensor  networks  is  a  very  promising  direc¬ 
tion.  It  has  a  lot  of  advantages  such  as  fast  ad  hoc  deployment, 
fine-grained  robust  sensing  and  tracking,  low-power  consump¬ 
tion,  and  low  cost.  VigilNet  presents  a  proof  that  viable  surveil¬ 
lance  systems  can  be  implemented  and  successfully  deployed  on 
current  motes  hardware. 
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